Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Two Win XP SP3 OS installed on my PC - shame on me


  • This topic is locked This topic is locked
63 replies to this topic

#1 JoanneMT

JoanneMT

  • Members
  • 180 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Florida
  • Local time:09:02 PM

Posted 17 October 2013 - 11:47 AM

I foolishly hired and gave access to my HP desktop to a "tech support co."

 

I now have a partial installation of XP3 SP2 or 3 that has a different system name. It can do everything but access the internet.

 

I did a full installation so I could get online (SP3) but it is not updating and I cannot find my document files. I had backups on my flash drive which "they" erased or downloaded to my other (E-machine desktop) PC which they touched to get a picture of the OS (I don't have an SP3 disk) and found some weird stuff on there too.. Such as a ".txt file that was actually a link to a weird website.  I am still using MS Essentials on both PCs.

 

There are only 8 MB of available hard disk and over 2 million files.on the HP, not sure how to get to my partial install (it has a different name)

 

I have to get access to the partial install to look for my files and download to a new flash drive. (is that a good plan?)

 

Not sure what junk is now  on my first  flash drive, I don't see my "Safe" icon or the files I had stored on it - 64 gig.

 

I'm pretty sure I need to hire someone to come here and do repairs but don't know who to trust.

 

Possibly I can just keep searching the hard drive using a new flash drive to copy down any files I find.  I have 3 important cases I was working on and about to install Dragon Pro.

 

I downloaded "Recuva" and it found some files but not the folders.  I don't know how flash drives work, if they can be made to hide an existing sets of data.

 

Please dont' get a headache over this, I know I screwed up. My files are what I need. Fortunately I saved some on gmail. 

 

Any techs understand how to research one C: drive with a backup partition (D:) and two installs of the same operating system?

 

I have a list of errors on the full install, it isn't updating properly.  I use my other PC for sensitive stuff but the bad guys knew that too and could have put some trigger on there. Fortunately I don't have a lot of money for anyone to steal...

 

Thanks to anyone who wants to respond. I should have trusted Bleeping. Neither co. found malware so I was okay before I let my paranoia set in.


Edited by hamluis, 09 December 2013 - 01:23 PM.
Moved from XP to Am I infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,363 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:06:02 PM

Posted 17 October 2013 - 12:20 PM

Go to the Start menu and right click on My Computer, click on manage, click on disk management.

 

Expand the window to its full size if it isn't already.

 

Please use the instruction to make a screenshot and post it in your topic.

 

1. Download and run A Thousand Words .
 
2. Follow the wizard to capture a screenshot
 
3. Use the built-in editor to resize, edit, or re-capture your screen shot. 
 
4. Your screen shot will be saved to your desktop when you finish the wizard.
 
You can post the screenshot in your next post as an attachment.  
 
Just below the area where you write text in a post there is the Post button, to the right of this is More Reply Options
 
Post2_zpsf05c0430.png
 
When you click on More Relpy Options  you will see Attach Files and Browse, click on Browse, this will open Pictures on your computer, click on the image you made with the Snipping Tool, then click on Attach This File, then Add Reply.
 
BCreply1_zpsc36d42fc.png 

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 JoanneMT

JoanneMT
  • Topic Starter

  • Members
  • 180 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Florida
  • Local time:09:02 PM

Posted 17 October 2013 - 04:25 PM

Thank you for your quick response. I know how to use screen print, but apparently Bleeping doesn't accept Paint output and it took me awhile to get the screenshot attached as you requested. Sorry for the delay and thanks again.



#4 JoanneMT

JoanneMT
  • Topic Starter

  • Members
  • 180 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Florida
  • Local time:09:02 PM

Posted 17 October 2013 - 04:27 PM

Error This file was too big to upload



#5 JoanneMT

JoanneMT
  • Topic Starter

  • Members
  • 180 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Florida
  • Local time:09:02 PM

Posted 17 October 2013 - 05:59 PM

Properties shows the Win viewer .jpg file is only 204 kb... but I do not see a snipping tool (would that be the "x" that selects a square/rectangle to cut then paste.?  Either I don't know what a snipping tool is or I don't have one on the viewer that pops up with A Thousand Words.

 

The report shows a healthy computer with D: and C:.  C: fills up the disk; the partial install doesn't show with this report.

 

I am so sorry. I cannot sit for long periods and even though I found the tool to select a small portion of the desktop (the report from Disk Management), it saves a file to the desktop: i select it with the options but i get a "too large" error.

 

Does Bleeping no longer allow a cut/paste from a Paint .jpg file? 



#6 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,363 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:06:02 PM

Posted 18 October 2013 - 09:06 AM

Did you try to resize the image as suggested in step 3.?

 

My apologies, the instructions for using the attachment was originally written for Vista, Windows 7, and Windows 8.  XP did not have a snipping tool.

 

You can only attach a picture in the manner I outlined previously.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#7 JoanneMT

JoanneMT
  • Topic Starter

  • Members
  • 180 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Florida
  • Local time:09:02 PM

Posted 18 October 2013 - 01:51 PM

DC3,thank you for your patience. After hours, I did a simple cut/paste via print screen and PAINT. I found the other operating system in a file on C: but my documents are not there. Here is the report you requested.

 

ERROR:

You are not allowed to use that image extension on this community

 

Can I update the report to another place?  It doesn't say much...

 

Thank you



#8 JoanneMT

JoanneMT
  • Topic Starter

  • Members
  • 180 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Florida
  • Local time:09:02 PM

Posted 18 October 2013 - 01:55 PM

The file is 80 kb in a .jpeg format.  Sorry

 



#9 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,363 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:06:02 PM

Posted 18 October 2013 - 06:02 PM

You can not copy and paste a jpeg file at Bleeping Computer.  Please use the instructions I provided in post #2.

 

The maximum file size for an attachment is 235.3 Kb.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#10 JoanneMT

JoanneMT
  • Topic Starter

  • Members
  • 180 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Florida
  • Local time:09:02 PM

Posted 18 October 2013 - 07:00 PM

Looking for info on how to save the console file (MMC 3.0) report in .txt format. There is a subject in the help file, but I cannot figure how to.

 

Here are the stats:

VOLUME:

HP_Pavilion (C:)  Partition Basic NTFS  Healthy (System) Status  226,44 GB Total Cap;  226.44GB Free space;  90% free;  NO Fault tolerance;  0% Overhead.

 

HP_Recovery (D:)  Partition Basic FFAT32  Healthy ---  6.42 GB Total Cap;  397MB Free space;  6% free;  NO Fault tolerance;  0% Overhead

 

DISK 0 Basic 232.88 GB online (and stats for D: and C: same as above on a bar graph,)

 

CD-ROM 0  DVD (E:)  No Media

 

Primary Partition

 

(end of report)

 

There are more drives: a DVD-RW and two USB Ports in the front; several USB ports in the back.

 

It might be pointing to E: because that was the USB port used during the destruction of my flash drive and the HP desktop.

 

I hope this gives you  the info you wanted... and that someone is still there...

 

THANK YOU for your time



#11 JoanneMT

JoanneMT
  • Topic Starter

  • Members
  • 180 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Florida
  • Local time:09:02 PM

Posted 18 October 2013 - 08:55 PM

Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update (KB951847) x86

could not be installed



#12 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,363 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:06:02 PM

Posted 19 October 2013 - 07:48 AM

Please download and install Speccy to provide us with information about your computer.  When the  FileHippo website opens, click on Download latest version in the upper left pane.
 
When Speccy opens you will see a screen similar to the one below.
 
speccy9_zps2d9cdedc.png
 
Click on File which is outlined in red in the screen above, and then click on Publish Snapshot.
 
The following screen will appear, click on Yes.
 
speccy7_zpsfa02105f.png
 
The following screen will appear, click on Copy to Clipboard.
 
speccy3_zps1791b093.png
 
In your next post right click inside the Reply to Topic box, then click on Paste.  This will load a link to the Speccy log.
 
 

Please download MiniToolBox  , save it to your desktop and run it.
 
 Checkmark the following checkboxes:
 
• List last 10 Event Viewer log
• List Installed Programs
• List Users, Partitions and Memory size.
• List Minidump Files
 
 Click on Go to start the scan.  Once it is finished highlight the text, copy it and paste it in your next post.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#13 JoanneMT

JoanneMT
  • Topic Starter

  • Members
  • 180 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Florida
  • Local time:09:02 PM

Posted 19 October 2013 - 11:28 AM

dc3, thank you for staying with me

 

http://speccy.piriform.com/results/4OCbqFyPQ7ULYOoGHS7BGFB

 

 

MiniToolBox by Farbar  Version: 13-07-2013
Ran by HP_Owner (administrator) on 19-10-2013 at 12:19:48
Running from "C:\Documents and Settings\HP_Owner.ROMEALT\My Documents\Downloads"
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET Framework WinForms' could not be installed. Error code 1603. Additional information is available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt.

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET Framework ASP .NET' could not be installed. Error code 1603. Additional information is available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt.

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET Framework 2' could not be installed. Error code 1603. Additional information is available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt.

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET Framework 1' could not be installed. Error code 1603. Additional information is available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt.

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update 'Dr. Watson' could not be installed. Error code 1603. Additional information is available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt.

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET Framework PreXP' could not be installed. Error code 1603. Additional information is available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt.

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET Framework CRT' could not be installed. Error code 1603. Additional information is available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt.

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET Framework CA' could not be installed. Error code 1603. Additional information is available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt.

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET Framework CLR' could not be installed. Error code 1603. Additional information is available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt.

Error: (10/19/2013 08:02:09 AM) (Source: MsiInstaller) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 2.0 Service Pack 2 -- There is a problem with this Windows Installer package. Please refer to the setup log for more information.


System errors:
=============
Error: (10/19/2013 08:05:06 AM) (Source: Windows Update Agent) (User: )
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update (KB951847) x86.

Error: (10/19/2013 02:12:09 AM) (Source: Windows Update Agent) (User: )
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update (KB951847) x86.

Error: (10/18/2013 08:06:20 PM) (Source: Windows Update Agent) (User: )
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update (KB951847) x86.

Error: (10/18/2013 01:18:13 PM) (Source: Windows Update Agent) (User: )
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update (KB951847) x86.

Error: (10/18/2013 08:05:19 AM) (Source: Windows Update Agent) (User: )
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update (KB951847) x86.

Error: (10/17/2013 09:01:46 PM) (Source: Windows Update Agent) (User: )
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update (KB951847) x86.

Error: (10/17/2013 00:00:10 PM) (Source: Windows Update Agent) (User: )
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update (KB951847) x86.

Error: (10/17/2013 10:44:36 AM) (Source: Windows Update Agent) (User: )
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update (KB951847) x86.

Error: (10/17/2013 01:42:00 AM) (Source: Microsoft Antimalware) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

    New Signature Version:

    Previous Signature Version: 1.161.42.0

    Update Source: %NT AUTHORITY59

    Update Stage: 4.3.0219.00

    Source Path: 4.3.0219.01

    Signature Type: %NT AUTHORITY602

    Update Type: %NT AUTHORITY604

    User: NT AUTHORITY\SYSTEM

    Current Engine Version: %NT AUTHORITY605

    Previous Engine Version: %NT AUTHORITY606

    Error code: %NT AUTHORITY607

    Error description: %NT AUTHORITY608

Error: (09/30/2013 04:03:30 PM) (Source: Microsoft Antimalware) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

    New Signature Version:

    Previous Signature Version: 1.159.750.0

    Update Source: %NT AUTHORITY59

    Update Stage: 4.3.0216.00

    Source Path: 4.3.0216.01

    Signature Type: %NT AUTHORITY602

    Update Type: %NT AUTHORITY604

    User: NT AUTHORITY\SYSTEM

    Current Engine Version: %NT AUTHORITY605

    Previous Engine Version: %NT AUTHORITY606

    Error code: %NT AUTHORITY607

    Error description: %NT AUTHORITY608


Microsoft Office Sessions:
=========================
Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller)(User: NT AUTHORITY)
Description: Microsoft .NET Framework 2.0 Service Pack 2.NET Framework WinForms1603C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller)(User: NT AUTHORITY)
Description: Microsoft .NET Framework 2.0 Service Pack 2.NET Framework ASP .NET1603C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller)(User: NT AUTHORITY)
Description: Microsoft .NET Framework 2.0 Service Pack 2.NET Framework 21603C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller)(User: NT AUTHORITY)
Description: Microsoft .NET Framework 2.0 Service Pack 2.NET Framework 11603C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller)(User: NT AUTHORITY)
Description: Microsoft .NET Framework 2.0 Service Pack 2Dr. Watson1603C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller)(User: NT AUTHORITY)
Description: Microsoft .NET Framework 2.0 Service Pack 2.NET Framework PreXP1603C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller)(User: NT AUTHORITY)
Description: Microsoft .NET Framework 2.0 Service Pack 2.NET Framework CRT1603C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller)(User: NT AUTHORITY)
Description: Microsoft .NET Framework 2.0 Service Pack 2.NET Framework CA1603C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt

Error: (10/19/2013 08:02:24 AM) (Source: MsiInstaller)(User: NT AUTHORITY)
Description: Microsoft .NET Framework 2.0 Service Pack 2.NET Framework CLR1603C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0D8B.txt

Error: (10/19/2013 08:02:09 AM) (Source: MsiInstaller)(User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 2.0 Service Pack 2 -- There is a problem with this Windows Installer package. Please refer to the setup log for more information.(NULL)(NULL)(NULL)


=========================== Installed Programs ============================

Adobe Flash Player 11 Plugin (Version: 11.9.900.117)
AiO_Scan (Version: 50.0.206.000)
AiOSoftware (Version: 50.0.206.000)
BufferChm (Version: 53.0.13.000)
CameraDrivers (Version: 5.0.0.290)
CameraDrivers (Version: 5.0.0.328)
CP_AtenaShokunin1Config (Version: 53.0.13.000)
CP_CalendarTemplates1 (Version: 53.0.13.000)
CP_Package_Basic1 (Version: 53.0.13.000)
CP_Package_Variety1 (Version: 53.0.13.000)
CP_Package_Variety2 (Version: 53.0.13.000)
CP_Package_Variety3 (Version: 53.0.13.000)
CP_Panorama1Config (Version: 53.0.13.000)
Creative MediaSource (Version: 3.00)
CueTour (Version: 53.0.13.000)
Destinations (Version: 53.0.13.000)
DeviceManagementQFolder (Version: 1.00.0000)
DocProc (Version: 5.2.0.0)
DocumentViewer (Version: 53.0.13.000)
DocumentViewerQFolder (Version: 1.00.0000)
Easy Internet Sign-up (Version: FE UI-4.0.0.1573)
Fax (Version: 50.0.206.000)
High Definition Audio Driver Package - KB888111 (Version: 20040219.000000)
HP Boot Optimizer (Version: 1.0.2)
HP Deskjet Printer Preload (Version: 10.1.0)
HP Document Viewer 5.3 (Version: 5.3)
HP Image Zone 5.3 (Version: 5.3)
HP Imaging Device Functions 5.3 (Version: 5.3)
HP Organize
HP Photosmart 330,380,420,470,7800,8000,8200 Series (Version: 8.1)
HP Photosmart Cameras 5.0 (Version: 5.0)
HP PSC & OfficeJet 5.3.B
HP Software Update (Version: 3.0.6.002)
HP Solution Center & Imaging Support Tools 5.3 (Version: 5.3)
HPProductAssistant (Version: 53.0.13.000)
HpSdpAppCoreApp (Version: 3.00.0000)
InstantShareDevices (Version: 53.0.13.000)
Intel® PRO Network Connections Drivers
IntelliMover Data Transfer Demo
InterVideo WinDVD Player
InterVideo WinDVD Player (Version: 5.0-B11.789)
LightScribe  1.4.42.1 (Version: 1.4.42.1)
Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2833941)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Standard Edition 2003 (Version: 11.0.8173.0)
Microsoft Plus! Digital Media Edition Installer (Version: 1.1.0.3500)
Microsoft Plus! Photo Story 2 LE (Version: 1.1.0.3463)
Microsoft Security Client (Version: 4.3.0219.0)
Microsoft Security Essentials (Version: 4.3.219.0)
Microsoft Works (Version: 08.04.0623)
Mozilla Firefox 24.0 (x86 en-US) (Version: 24.0)
Mozilla Maintenance Service (Version: 24.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
NewCopy (Version: 50.0.206.000)
NVIDIA Drivers
PanoStandAlone (Version: 53.0.13.000)
PhotoGallery (Version: 53.0.13.000)
PSPrinters08 (Version: 8.01.0000)
PSTAPlugin (Version: 8.01.0000)
QuickTime
RandMap (Version: 53.0.13.000)
Readme (Version: 50.0.206.000)
RealPlayer
Recuva (Version: 1.48)
Scan (Version: 5.2.0.0)
ScannerCopy (Version: 5.2.0.0)
SkinsHP1 (Version: 53.0.13.000)
SolutionCenter (Version: 50.0.152.000)
Sonic MyDVD Plus (Version: 6.1.3)
Sonic RecordNow Audio (Version: 2.0.2)
Sonic RecordNow Copy (Version: 2.0.2)
Sonic RecordNow Data (Version: 2.0.2)
Sonic Update Manager (Version: 3.0.0)
Sonic_PrimoSDK (Version: 53.0.13.000)
Sound Blaster Audigy 4 (Version: 1.0)
Status (Version: 53.0.13.000)
TrayApp (Version: 53.0.13.000)
Unload (Version: 5.0.0)
Update for Windows XP (KB2345886) (Version: 1)
Update for Windows XP (KB2661254-v2) (Version: 2)
Update for Windows XP (KB2749655) (Version: 1)
Update for Windows XP (KB2863058) (Version: 1)
Update for Windows XP (KB898461) (Version: 1)
Update for Windows XP (KB951978) (Version: 1)
Update for Windows XP (KB955759) (Version: 1)
Update for Windows XP (KB968389) (Version: 1)
Update for Windows XP (KB971029) (Version: 1)
Update for Windows XP (KB973815) (Version: 1)
Updates from HP (remove only)
WebFldrs XP (Version: 9.50.7523)
WebReg (Version: 53.0.13.000)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Media Format Runtime
Windows Media Player 10
Windows XP Service Pack 3 (Version: 20080414.031525)

========================= Memory info: ===================================

Percentage of memory in use: 82%
Total physical RAM: 1022.41 MB
Available physical RAM: 181.75 MB
Total Pagefile: 2459.37 MB
Available Pagefile: 1816.98 MB
Total Virtual: 2047.88 MB
Available Virtual: 1972.35 MB

========================= Partitions: =====================================

1 Drive c: (HP_PAVILION) (Fixed) (Total:226.44 GB) (Free:203.62 GB) NTFS
2 Drive d: (HP_RECOVERY) (Fixed) (Total:6.42 GB) (Free:0.39 GB) FAT32

========================= Users: ========================================

User accounts for \\ROMEALT

Administrator            Guest                    HelpAssistant            
HP_Owner                 SUPPORT_388945a0         SUPPORT_fddfa904         

========================= Minidump Files ==================================

No minidump file found


**** End of log ****
 



#14 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,363 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:06:02 PM

Posted 19 October 2013 - 12:38 PM

Please download Malwarebytes Anti-Malware.
 
1)  Double-click on mbam-setup.exe, then click on Run to install the application, follow the prompts through the installation.
 
2)  When the installation has finished, make sure you leave both of these checked:
 
    Update Malwarebytes' Anti-Malware
 
    Launch Malwarebytes' Anti-Malware
 
Then click on Finish.
 
3)  MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. 
 
4)  Click on perform Quick Scan, then click on the Scan button.
 
If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
 
5)  The scan will now begin, this may take some time to complete so please be patient.
 
6)  When the scan is finished click on Show Results to display all objects found.
 
7)  Click OK to close the message box and continue with the removal process.
 
8)  Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
 
Make sure that every item shown in the results has a check mark in the box next to it, then click on Remove Selected.
 
9)  When removal is completed, a log will open in Notepad.
 
This log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Copy and paste the contents of the log in your next post, then exit MBAM.
 
Important:  If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Reagardless if prompted to restart the computer or not, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.
 

Please copy the Malwarebytes log and paste it in your next post.
 
To locate this file right click on the Start orb and choose Open Windows Explorer, then click on C: drive.
 
When the C: drive opens click on the following:  
 
Click on ProgramData, Malwarebytes, Malwarebytes' Anti-Malware, Logs.  
 
If there is more than one log choose the log with the date that you ran scan that I requested.

Edited by dc3, 19 October 2013 - 12:58 PM.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#15 JoanneMT

JoanneMT
  • Topic Starter

  • Members
  • 180 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Florida
  • Local time:09:02 PM

Posted 19 October 2013 - 03:15 PM

DC3, here is the mbam report. It found 3 items which I selected for cleaning and after restart looked for the MBAM log and fortunately made a copy of it before I did the restart.  After the report, I entered some notes about files I saw that did not seem to belong in C:\.

 

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.10.19.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
HP_Owner :: ROMEALT [administrator]

10/19/2013 2:29:12 PM
mbam-log-2013-10-19 (14-29-12).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 391891
Time elapsed: 14 minute(s), 44 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 3
C:\ProduKey.exe (PUP.PSWTool.ProductKey) -> Quarantined and deleted successfully.

C:\Documents and Settings\HP_Owner.HP-27E1513D96\Local Settings\Temporary Internet Files\Content.IE5\6GCW6NVZ\spash2[1].exe (Trojan.PWS.Zbot.AI) -> Quarantined and deleted successfully.

C:\Documents and Settings\HP_Owner.ROMEALT\Local Settings\Temporary Internet Files\Content.IE5\GXQVK9E3\Google_Chrome_Setup[1].exe (PUP.Optional.iBryte) -> Quarantined and deleted successfully.

(end)
 

--------My notes to you:

NOTE:  I am running IE8, only used by MS Updates. Using Mozilla Firefox

My previous PC name before "Panda" techs crashed OS and saved (mal?)files was during 9-11-13 and 9-14-13 is  HP_Owner.HP-27E1513D96

When I completed the new install (with partial install still on disk) I named this PC HP_Owner.ROMEALT.

I saw additional user names - not mine. I did not execute MBAM in safe mode to find these results.

Still receiving error message on boot, after MBAM clean and restart:
"WindowsSearch.exe Unable To Locate Component"
"This app... failed...  uncdms.dll was not found. Re-installing the application may fix this problem"

While looking for the MBAM log,
I found a file in HP_Pavillion(C:) ProductKey  Microsoft Office Outlook Connect - 1KB - but the properties reports it opens with an unknown application, Location: C:\  Size: 625 bytes Size on disk: 4.00 KB (4,096 bytes) Created and modified on (the dates Panda was there) Thurs. Sept 12, 2013  2:02:27 PM.  

A file named unins000 Outlook Item in C:\Program Files\MBAM...\unins000.msg\ is a command to start Microsoft Office Outlook  which cannot start Outlook by me with an error message that it might be in use by another program, I might not have permission...  There is also an ActiveX control where Permissions reports vbalsgrid6.ocx that opens with an unknown application.

 

-------------------- hope this helps

 

Thank you






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users